Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f10f3378-9ac0-3dc8-9d46-4abded4f55d5.roa
File:                     f10f3378-9ac0-3dc8-9d46-4abded4f55d5.roa (raw, json)
Hash identifier:          VD5XraqX5EwF5xeGGkvE3g+a25PVZpxIpUtfFfXuGcU=
Subject key identifier:   42:BE:E7:85:DE:8E:B7:B7:8E:9D:A6:3D:5B:E5:C4:85:59:A9:63:1D
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858493243DD45E81B526CD7DC5700
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f10f3378-9ac0-3dc8-9d46-4abded4f55d5.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        192.80.245.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:dd:45:e8:1b:52:6c:d7:dc:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=1615d54e-77e1-4aa4-9316-94175976dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:ee:46:b9:b3:4e:34:30:89:30:5c:b8:35:
                    d5:7e:83:a9:5c:83:6f:a5:45:ee:ec:5a:ce:a9:9f:
                    67:e8:8a:c8:37:c9:1d:48:18:f0:21:a5:10:17:74:
                    d2:e6:ad:d2:1b:f1:91:45:64:79:56:b2:a9:a6:7b:
                    bd:8b:a8:7f:85:0f:80:38:f6:ea:5b:f9:98:95:1c:
                    5b:bb:b2:ec:a2:76:3b:e0:7d:ea:46:62:f9:e7:28:
                    80:6f:7c:6d:13:34:5a:60:e8:d1:eb:a5:07:1e:fc:
                    0a:cb:39:16:72:4b:81:bc:f1:07:6c:da:fe:ca:69:
                    49:0f:c1:14:90:a1:ca:64:dd:a2:9f:9f:d1:d9:1d:
                    27:aa:6b:c4:f5:06:ff:51:cb:cf:4f:9d:a9:4c:b1:
                    0c:a8:e8:4b:76:57:8f:b0:88:7f:b1:54:68:f1:f1:
                    07:98:8c:00:e9:b1:0d:f5:97:82:3a:79:e9:72:9f:
                    79:1f:0c:c4:50:6c:b2:ea:9f:55:7f:84:25:ca:bb:
                    23:9e:5c:30:8a:18:40:c6:19:22:2a:35:ab:3f:f8:
                    2d:3f:55:ee:ed:ef:2b:64:d7:c8:d9:4a:85:b7:11:
                    de:27:52:f5:5f:12:b3:83:87:91:00:cf:b0:40:e6:
                    21:2a:0f:85:ba:7b:a5:d5:ce:ad:47:35:c8:f1:62:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:E7:85:DE:8E:B7:B7:8E:9D:A6:3D:5B:E5:C4:85:59:A9:63:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f10f3378-9ac0-3dc8-9d46-4abded4f55d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:11:15:d2:8d:48:61:bf:35:ce:af:c4:43:07:a6:b5:0f:3e:
         7d:68:8b:9b:1b:c2:7a:87:c5:72:95:66:5b:06:1d:2b:b2:d2:
         c2:a2:12:8a:a0:2e:bb:8a:6f:dd:22:97:34:b4:e0:9d:13:af:
         32:65:d0:98:f7:4e:bf:cc:60:08:ee:40:e8:b5:ca:82:e1:7d:
         20:f3:22:a0:08:d6:4f:24:8b:bd:21:24:b2:92:81:9d:0a:76:
         fa:4a:96:15:9c:35:96:64:22:ab:39:19:c6:05:ff:36:63:5f:
         65:e8:bc:a4:4d:d9:79:c0:c6:e9:f0:4a:47:62:c4:75:8f:77:
         ce:16:8d:09:55:c6:63:b7:4e:f6:b4:a3:68:69:65:ba:cc:f6:
         09:a4:40:c1:9c:c6:60:73:b8:09:3f:f9:41:19:cc:5c:14:92:
         54:fc:2b:a4:15:18:f7:7b:a2:3a:e5:b4:9d:c3:7e:93:c6:59:
         e3:14:c9:41:8f:24:c0:63:1c:40:2b:32:c4:64:73:61:cb:3e:
         56:e8:ce:a1:ae:28:40:17:91:49:50:93:5f:e7:71:69:14:a1:
         c7:41:bc:0d:78:ca:44:93:09:09:83:df:06:2e:c6:45:90:f3:
         2d:31:b6:80:d5:11:e9:6c:bc:b8:3a:23:9b:8b:fd:c1:94:1e:
         fa:41:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net